{"id":"CVE-2026-101447","kind":"vulnerability","aliases":["CVE-2026-101447"],"related":[],"title":"Oracle Siebel CRM Development: Workflow flaw allows takeover over HTTP","description":"Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow).  Supported versions that are affected are 25.12-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Siebel CRM Development. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).","summary":"A flaw in the Workflow component of Oracle Siebel CRM Development lets a low-privileged user reach the product over HTTP and take it over when another person takes an action. The sources rate it CVSS 7.1 with high confidentiality, integrity and availability impact.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["enterprise-crm","oracle","siebel-crm","vendor"],"not_affected_if":["other-versions"],"how_to_check":"- Check the installed Siebel CRM Development version against the affected range 25.12-26.9 in the Oracle Siebel administration console or install records\n- unknown","fix":"- Apply the Oracle Critical Patch Update fix for Siebel CRM Development as listed in the Oracle advisory\n- unknown","status":"open","published_at":"2026-10-20T22:17:53+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","triaged_at":"2026-10-25T03:34:32+00:00","updated_at":"2026-10-25T03:34:32+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T03:34:32Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Critical Patch Update fix for Siebel CRM Development as listed in the Oracle advisory\n- unknown","reach":"network","title":"Oracle Siebel CRM Development: Workflow flaw allows takeover over HTTP","impact":"high","summary":"A flaw in the Workflow component of Oracle Siebel CRM Development lets a low-privileged user reach the product over HTTP and take it over when another person takes an action. The sources rate it CVSS 7.1 with high confidentiality, integrity and availability impact.","category":"vendor","nicknames":[],"who_cares":["siebel-crm","oracle","enterprise-crm"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker takes over the Siebel CRM Development instance, reading and changing its data","analyst_note":"Check the Oracle Siebel security advisory for the patched version and any workaround; the NVD entry does not give a fix version.","how_to_check":"- Check the installed Siebel CRM Development version against the affected range 25.12-26.9 in the Oracle Siebel administration console or install records\n- unknown","needs_analyst":true,"not_affected_if":["other-versions"],"who_is_affected":"Organizations running Oracle Siebel CRM Development in the affected version range 25.12-26.9 with the Workflow component exposed over HTTP. Sites on other Siebel versions or without this product can skip it. The sources do not say which Workflow configurations are required.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000623,"input_tokens":3464,"output_tokens":553,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-101447':13A,16A '-2026':12A,15A '-26.9':90C '/av':148C '25.12':89C '3.1':135C,147C '7.1':62B,138C 'access':101C 'action':56B 'affect':87C 'allow':7A,95C 'anoth':52B 'attack':98C,110C,120C,122C 'avail':68B,142C 'base':136C 'compon':30B,81C 'compromis':105C 'confidenti':65B,139C 'crm':3A,19B,23B,34B,74C,80C,107C,132C 'cve':11A,14A 'cvss':61B,134C,144C,146C 'develop':4A,35B,75C,108C,133C 'difficult':91C 'enterpris':18B 'enterprise-crm':17B 'exploit':93C 'flaw':6A,26B 'h':156C 'h/a':155C 'h/i':154C 'h/pr':150C 'high':64B 'http':10A,46B,103C 'human':112C 'impact':69B,143C 'integr':66B,140C 'interact':113C 'l/ui':151C 'let':36B 'low':39B,96C 'low-privileg':38B 'n/ac':149C 'network':100C 'oracl':1A,20B,32B,78C 'person':53B,116C 'privileg':40B,97C 'product':44B,76C 'r/s':152C 'rate':59B 'reach':42B 'requir':111C 'result':127C 'score':137C 'siebel':2A,22B,33B,73C,79C,106C,131C 'siebel-crm':21B 'sourc':58B 'success':109C,121C 'support':83C 'take':48B,54B 'takeov':8A,129C 'u/c':153C 'user':41B 'vector':145C 'vendor':24B 'version':84C 'via':102C 'vulner':70C,94C,125C 'workflow':5A,29B,82C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle Siebel CRM Development in the affected version range 25.12-26.9 with the Workflow component exposed over HTTP. Sites on other Siebel versions or without this product can skip it. The sources do not say which Workflow configurations are required.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:17:53+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101447","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101447","severity":null,"published_at":"2026-10-20T22:17:53+00:00","modified_at":"2026-10-21T14:29:49+00:00","first_seen_at":"2026-10-23T21:57:21+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}